Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Wolff Principal Holdings, LP

bd_ed3439231755bec4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 15, 2019

Filed

Apr 10, 2020

To disclose

34 weeks

Affected

4state residents only

Linked

2 filings

Confidence

65%

Full breach record for Wolff Principal Holdings, LP →3 incidents on file

Wolff Principal Holdings, LP notified individuals of a phishing campaign that compromised employee email accounts between August 15 and October 31, 2019. The incident potentially exposed personal information. The company engaged forensic specialists, reset credentials, and offered 12 months of Kroll identity monitoring. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 34 weeks / 239 days

Aug 15, 2019

Begins

Aug 15, 2019

Discovered

Apr 10, 2020

Filed

vs. sector median

+15 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_a29a135debb673fa2020-04-10Candidate

Name: Wolff Principal Holdings, LP
norm: wolff principal

Name: Wolff Principal Holdings, LP
norm: wolff principal
Industry: Professional Servicesllm

Discovered: Aug 15, 2019
Breach occurred: Aug 15, 2019 – Oct 31, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2020
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Provided relevant regulatory notices
Initial access: phishing_link

During the incident: Began an investigation with the assistance of third-party computer specialists
Reset passwords for The Wolff Company email accounts
Implemented increased security measures for email account access
Conducted additional employee training
Notified law enforcement
Provided relevant regulatory notices
Secured the services of Kroll to provide identity monitoring services
Changes made: Reviewing policies and procedures relating to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(239 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGApr 10 · first

Montana State AGApr 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/doc-19.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2020
Raw hash: 2138d9c5414aea70a65762a2931f21ebe58ffcfc008e1f7c07965aa6dac17f12

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWolff Principal Holdings, LP

Victim entityWolff Principal Holdings, LP

Incidentdiscovered Aug 15, 2019

Stated responseBegan an investigation with the assistance of third-party computer specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov